Demos test helper: fix regular expression injection (#32106) (#32115)

EugeniyKiyashko · Copilot · web-flow · commit 217768f7566a · 2026-01-08T20:52:11.000+04:00
Signed-off-by: EugeniyKiyashko &lt;EugeniyKiyashko@users.noreply.github.com&gt;
Co-authored-by: Copilot &lt;175728472+Copilot@users.noreply.github.com&gt;
diff --git a/apps/demos/utils/visual-tests/matrix-test-helper.ts b/apps/demos/utils/visual-tests/matrix-test-helper.ts
@@ -47,7 +47,8 @@ function shouldRunTestExplicitlyInternal(framework, product, demo) {
 }
 
 function patternGroupFromValues(product, demo, framework) {
-  const wrap = (x) => RegExp(x || '.*', 'i');
+  const escapeRegExp = (string) => string.replace(/[.*+?^${}()|[\]\\-]/g, '\\$&');
+  const wrap = (x) => RegExp(x ? escapeRegExp(x) : '.*', 'i');
   return {
     product: wrap(product),
     demo: wrap(demo),

Original file line number	Diff line number	Diff line change
`@@ -47,7 +47,8 @@ function shouldRunTestExplicitlyInternal(framework, product, demo) {`
`47`	`47`	`}`
`48`	`48`
`49`	`49`	`function patternGroupFromValues(product, demo, framework) {`
`50`		`- const wrap = (x) => RegExp(x \|\| '.*', 'i');`
	`50`	`+ const escapeRegExp = (string) => string.replace(/[.*+?^${}()\|[\]\\-]/g, '\\$&');`
	`51`	`+ const wrap = (x) => RegExp(x ? escapeRegExp(x) : '.*', 'i');`
`51`	`52`	`return {`
`52`	`53`	`product: wrap(product),`
`53`	`54`	`demo: wrap(demo),`